With the release of Carbon Black EDR Server 7.1.0, admins can customize the Event Forwarder from directly within the Carbon Black EDR console.
By default, this feature is enabled for cloud instances, and disabled for on-prem deployments. You can enable the feature for on-prem by adding
EventForwarderEnabled=true in cb.conf and restarting services.
This feature cannot be used to control Event Forwarder instances that are remote to the Carbon Black EDR server.